With the evolution of information, communications, and technologies, modern industrial control systems (ICSs) face more and more cybersecurity issues. This leads to increasingly severe risks in critical infrastructure and assets. Therefore, risk analysis becomes a significant yet not well investigated topic for prevention of cyberattack risks in ICSs. To tackle this problem, a dynamic impact assessment approach is presented in this paper for risk analysis in ICSs. The approach predicts the trend of impact of cybersecurity dynamically from full recognition of asset knowledge. More specifically, an asset is abstracted with properties of construction, function, performance, location, and business. From the function and performance properties of the asset, object-oriented asset models incorporating with the mechanism of common cyberattacks are established at both component and system levels. Characterizing the evolution of behaviors for single asset and system, the models are used to analyze the impact propagation of cyberattacks. Then, from various possible impact consequences, the overall impact is quantified based on the location and business properties of the asset. A special application of the approach is to rank critical system parameters and prioritize key assets according to impact assessment. The effectiveness of the presented approach is demonstrated through simulation studies for a chemical control system.

中文翻译：

---

基于资产的网络攻击动态影响评估，用于工业控制系统中的风险分析

随着信息，通信和技术的发展，现代工业控制系统（ICS）面临越来越多的网络安全问题。这导致关键基础设施和资产中日益严重的风险。因此，风险分析成为预防ICS中的网络攻击风险的重要且尚未充分研究的主题。为了解决这个问题，本文提出了一种动态影响评估方法，用于ICS中的风险分析。该方法通过完全识别资产知识来动态预测网络安全影响的趋势。更具体地说，资产是通过构造，功能，性能，位置和业务的属性来抽象的。根据资产的功能和性能属性，在组件和系统级别都建立了与常见网络攻击机制相结合的面向对象的资产模型。这些模型表征了单个资产和系统行为的演变，用于分析网络攻击的影响传播。然后，从各种可能的影响后果中，根据资产的位置和业务属性对总体影响进行量化。该方法的一种特殊应用是对关键系统参数进行排序，并根据影响评估对关键资产进行优先级排序。通过对化学控制系统的仿真研究证明了所提出方法的有效性。然后，从各种可能的影响后果中，根据资产的位置和业务属性对总体影响进行量化。该方法的一种特殊应用是对关键系统参数进行排序，并根据影响评估对关键资产进行优先级排序。通过对化学控制系统的仿真研究证明了所提出方法的有效性。然后，从各种可能的影响后果中，根据资产的位置和业务属性对总体影响进行量化。该方法的一种特殊应用是对关键系统参数进行排序，并根据影响评估对关键资产进行优先级排序。通过对化学控制系统的仿真研究证明了所提出方法的有效性。